VPS三道安全之门

BY abamon/XTBlock

我的个人博客站：www.zy2zy.com

转载请注明出处：http://www.zy2zy.com/articles/79.html

最近刚买了自己的vps，今天关注了vps需要注意的点，结果发现vps非常需要注意安全，作为一个直接暴露在互联网上的主机，如果只有root+密码的模式，那么非常容易被暴力破解。如果被破解了，那么黑客就可以使用你的vps刷流量（流量超标需要你来付钱！）、发动DDOS攻击等。

首先说明一下，我的vps是CentOS，一开始我也是以为作为一个个人的博客站，即没有什么信息，也没有什么隐私，应该没有什么问题。结果今天看了一下安全日志：

vim /etc/log/secure

被一堆ip的密码错误，登录失败等刷屏

试图破解我root密码的ip足足有185个，也就是说同时有185台设备在试图暴力破解我的root密码，黑名单是使用denyhosts来抓取的，附录是试图破解我root密码的ip黑名单，我查了其中一个ip，香港的地址- -

黑名单的判断口径是试错10次root密码，因此判断绝对不会有错！由此可见公网上有多么的恐怖。

下面我总结一下公网上保护自己的经验：

三道安全门

一、修改ssh登陆的默认端口

为什么要修改默认端口？一般新手都会使用默认端口，而使用暴力破解法的人必定会优先在默认端口试错，而修改端口之后，这些黑客们就必须同时使用正确的端口与密码。平均试错次数至少增加了1000倍有余吧。

打开配置文件：

[[email protected] ~]# vim /etc/ssh/sshd_config

修改默认端口，端口项默认是是被注释掉的，其默认值是22，修改后如下：

（假设我们修改为64851，修改后的端口你自己一定得记住，不然自己也没办法登陆了）

Port 64851

修改完之后重启sshd

[[email protected] ~]# /etc/init.d/sshd restart

二、使用denyhosts

使用denyhosts的好处在于它能够在极大程度上减缓暴力试错的速度，本来暴力试错的黑客使用200台电脑同时进行试错，那么他成功暴力破解的时间就会降低200倍。而如果有了denyhosts，每个ip试错超过一定次数（可以自己设置，假设这里次数是10）之后就不再允许继续试错，那么暴力试错者在每台电脑尝试了10次之后就只能换电脑了，如此基本上等价于杜绝了它破解密码的可能性。

1、安装配置denyhosts：

[[email protected] ~]# yum install denyhosts

这里需要确认是否安装成功，比如说，我用的DigitalOcean上512M的电脑，内存不怎么够用，因为内存不够安装失败了，因为http服务器缓存占了不少内存。最后我重启电脑之后立即安装denyhosts成功。

2、修改配置文件

[[email protected] ~]# vim /etc/denyhosts.conf

配置文件修改结果可以参考：

SECURE_LOG = /var/log/auth.log
HOSTS_DENY = /etc/hosts.deny
PURGE_DENY = 1w
BLOCK_SERVICE = sshd
DENY_THRESHOLD_INVALID = 5
DENY_THRESHOLD_VALID = 10
DENY_THRESHOLD_ROOT = 10
DENY_THRESHOLD_RESTRICTED = 1
WORK_DIR = /var/lib/denyhosts
SUSPICIOUS_LOGIN_REPORT_ALLOWED_HOSTS=YES
HOSTNAME_LOOKUP=YES
LOCK_FILE = /var/run/denyhosts.pid
ADMIN_EMAIL = [email protected]
SMTP_HOST = localhost
SMTP_PORT = 25
SMTP_FROM = DenyHosts<[email protected]>
SMTP_SUBJECT = DenyHosts Report
AGE_RESET_VALID=5d
AGE_RESET_ROOT=25d
AGE_RESET_RESTRICTED=25d
AGE_RESET_INVALID=10d
RESET_ON_SUCCESS = yes
DAEMON_LOG = /var/log/denyhosts
DAEMON_SLEEP = 30s
DAEMON_PURGE = 1h

三、使用RSA密钥

随便找一台Linux设备（Unix家族的系统应该都可以、除此之外，windows的mingw也是可以的），使用如下指令：

[[email protected] ~]# ssh-keygen -t rsa

然后根据提示输入目录与密码

1、目录如果不填写（直接按Enter键则为空），那么id_rsa会存在 ~/.ssh/目录下；

2、密码的含义是即便你密钥对了，还得再验证一次密码。密码一般不填写，因为密钥的安全性已经很高了，如需加强保密级别，可以填写密码。

生成的两个密钥：

-rw------- 1 root root 1675 Apr 21 13:20id_rsa
-rw-r--r-- 1 root root  394 Apr 21 13:20 id_rsa.pub

其中id_rsa.pub是公钥，id_rsa是私钥，私钥需要自己保存（用于登陆vps）

生成密钥之后，将公钥复制到~/.ssh/目录下，然后修改sshd的配置文件：

[[email protected] ~]# vim /etc/ssh/sshd_config

修改如下参数：

RSAAuthentication yes                                 #RSA认证
PubkeyAuthentication yes                              #开启公钥验证
AuthorizedKeysFile .ssh/authorized_keys               #验证文件路径
PasswordAuthentication no                             #禁止密码认证
UsePAM no                                             #禁用PAM

修改完之后重启sshd服务：

[[email protected] ~]# /etc/init.d/sshd restart

3、修改secureCRT参数，使用密钥登陆服务器

进入Session Options界面，选中SSH2-PublicKey-Properties，如图

选中Properties之后会进入下一个界面，如图：

在Use identity or certificate file栏填写自己的私钥id_rsa所在的目录（我的私钥名字是zy）。

最后

设置完以上配置之后，你的vps被暴力破解的概率基本等于0啦。而你也可以正常的使用vps了。

附录（部分ip地址）

# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 193.104.41.53
sshd: 193.104.41.53
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.30
sshd: 221.229.166.30
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.21.215
sshd: 222.186.21.215
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 180.210.234.87
sshd: 180.210.234.87
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.21.198
sshd: 222.186.21.198
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 117.0.33.2
sshd: 117.0.33.2
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.191
sshd: 43.255.190.191
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.190
sshd: 43.255.190.190
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.21.217
sshd: 222.186.21.217
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 122.224.4.136
sshd: 122.224.4.136
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.201.22
sshd: 58.218.201.22
# DenyHosts: Tue Apr 21 12:44:26 2015 | sshd:184.168.115.157
sshd: 184.168.115.157
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 117.21.174.111
sshd: 117.21.174.111
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.56.143
sshd: 222.186.56.143
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.27
sshd: 221.229.166.27
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 94.229.33.233
sshd: 94.229.33.233
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.29
sshd: 221.229.166.29
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.28
sshd: 221.229.166.28
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.150
sshd: 43.255.190.150
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.203.3.117
sshd: 221.203.3.117
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.204.226
sshd: 58.218.204.226
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 216.75.112.251
sshd: 216.75.112.251
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.161
sshd: 43.255.190.161
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.65.30.92
sshd: 218.65.30.92
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 62.129.242.26
sshd: 62.129.242.26
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.201.17
sshd: 58.218.201.17
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 173.201.20.170
sshd: 173.201.20.170
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.119
sshd: 43.255.190.119
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.109.62
sshd: 218.87.109.62
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.117
sshd: 43.255.190.117
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.116
sshd: 43.255.190.116
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.115
sshd: 43.255.190.115
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.165
sshd: 43.255.190.165
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 128.199.65.14
sshd: 128.199.65.14
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.201.19
sshd: 58.218.201.19
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 61.166.189.69
sshd: 61.166.189.69
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 69.46.0.138
sshd: 69.46.0.138
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 59.63.192.199
sshd: 59.63.192.199
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.56.138
sshd: 222.186.56.138
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.65.30.73
sshd: 218.65.30.73
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.131
sshd: 43.255.191.131
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.132
sshd: 43.255.191.132
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.133
sshd: 43.255.191.133
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.138
sshd: 43.255.191.138
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 91.221.41.232
sshd: 91.221.41.232
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 182.100.67.112
sshd: 182.100.67.112
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 144.0.0.200
sshd: 144.0.0.200
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 46.166.165.87
sshd: 46.166.165.87
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 189.198.156.86
sshd: 189.198.156.86
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.111.108
sshd: 218.87.111.108
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 61.160.222.76
sshd: 61.160.222.76
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.168
sshd: 43.255.190.168
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.169
sshd: 43.255.190.169
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.162
sshd: 43.255.190.162
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.163
sshd: 43.255.190.163
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.160
sshd: 43.255.190.160
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.187.223.214
sshd: 222.187.223.214
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.166
sshd: 43.255.190.166
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.167
sshd: 43.255.190.167
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.164
sshd: 43.255.190.164
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.109.60
sshd: 218.87.109.60
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.154
sshd: 43.255.190.154
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.118
sshd: 43.255.190.118
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.65.30.61
sshd: 218.65.30.61
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.199.195
sshd: 58.218.199.195
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.204.248
sshd: 58.218.204.248
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.138
sshd: 43.255.190.138
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 62.193.241.59
sshd: 62.193.241.59
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 195.14.0.215
sshd: 195.14.0.215
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.199.49
sshd: 58.218.199.49
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.211.190
sshd: 58.218.211.190
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 72.167.145.195
sshd: 72.167.145.195
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 182.100.67.113
sshd: 182.100.67.113
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.171
sshd: 43.255.190.171
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.170
sshd: 43.255.190.170
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 61.183.1.2
sshd: 61.183.1.2
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.172
sshd: 43.255.190.172
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.176
sshd: 43.255.190.176
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 68.178.150.138
sshd: 68.178.150.138
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.134
sshd: 43.255.190.134
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.58.131
sshd: 222.186.58.131
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.21.251
sshd: 222.186.21.251
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.157
sshd: 43.255.191.157
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 96.127.190.130
sshd: 96.127.190.130
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 61.160.215.103
sshd: 61.160.215.103
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 93.118.228.70
sshd: 93.118.228.70
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 188.11.49.114
sshd: 188.11.49.114
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 78.109.142.184
sshd: 78.109.142.184
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.183
sshd: 43.255.190.183
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.145
sshd: 43.255.190.145
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 113.195.145.80
sshd: 113.195.145.80
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.144
sshd: 43.255.190.144
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.160.230
sshd: 221.229.160.230
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.146
sshd: 43.255.190.146
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.147
sshd: 43.255.190.147
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.140
sshd: 43.255.190.140
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.141
sshd: 43.255.190.141
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.142
sshd: 43.255.190.142
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.143
sshd: 43.255.190.143
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 182.100.67.102
sshd: 182.100.67.102
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.92
sshd: 43.255.190.92
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.91
sshd: 43.255.190.91
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.90
sshd: 43.255.190.90
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.134.94
sshd: 222.186.134.94
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 202.201.13.178
sshd: 202.201.13.178
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.124
sshd: 43.255.190.124
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.125
sshd: 43.255.190.125
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.122
sshd: 43.255.190.122
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.160.237
sshd: 221.229.160.237
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.120
sshd: 43.255.190.120
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.211.166
sshd: 58.218.211.166
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 61.160.213.190
sshd: 61.160.213.190
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.134.98
sshd: 222.186.134.98
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 191.234.21.211
sshd: 191.234.21.211
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 61.136.60.123
sshd: 61.136.60.123
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 61.160.212.27
sshd: 61.160.212.27
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 117.21.191.23
sshd: 117.21.191.23
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.213.254
sshd: 58.218.213.254
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.254
sshd: 221.229.166.254
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.148
sshd: 43.255.190.148
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.160.222
sshd: 221.229.160.222
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.160.223
sshd: 221.229.160.223
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.149
sshd: 43.255.190.149
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.153
sshd: 43.255.190.153
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.152
sshd: 43.255.190.152
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.151
sshd: 43.255.190.151
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.111.109
sshd: 218.87.111.109
# DenyHosts: Tue Apr 21 12:44:26 2015 | sshd:43.255.190.157
sshd: 43.255.190.157
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.156
sshd: 43.255.190.156
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.155
sshd: 43.255.190.155
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.213.230
sshd: 58.218.213.230
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 182.100.67.115
sshd: 182.100.67.115
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 182.100.67.114
sshd: 182.100.67.114
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.159
sshd: 43.255.190.159
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.158
sshd: 43.255.190.158
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.111.107
sshd: 218.87.111.107
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.161.4.148
sshd: 222.161.4.148
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 117.21.191.196
sshd: 117.21.191.196
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.135
sshd: 43.255.190.135
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.126
sshd: 43.255.190.126
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.137
sshd: 43.255.190.137
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.204.245
sshd: 58.218.204.245
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.131
sshd: 43.255.190.131
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.130
sshd: 43.255.190.130
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.133
sshd: 43.255.190.133
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.132
sshd: 43.255.190.132
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.98
sshd: 221.229.166.98
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.139
sshd: 43.255.190.139
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.134.96
sshd: 222.186.134.96
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 208.109.198.213
sshd: 208.109.198.213
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.134.90
sshd: 222.186.134.90
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 58.218.204.241
sshd: 58.218.204.241
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.240
sshd: 221.229.166.240
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.123
sshd: 43.255.190.123
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.134.92
sshd: 222.186.134.92
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.93
sshd: 43.255.190.93
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.121
sshd: 43.255.190.121
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.111.118
sshd: 218.87.111.118
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 185.42.240.32
sshd: 185.42.240.32
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.111.117
sshd: 218.87.111.117
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.87.111.116
sshd: 218.87.111.116
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.65.30.23
sshd: 218.65.30.23
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.167
sshd: 43.255.191.167
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.21.209
sshd: 222.186.21.209
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.188
sshd: 43.255.190.188
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.189
sshd: 43.255.190.189
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 222.186.51.228
sshd: 222.186.51.228
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 59.53.94.9
sshd: 59.53.94.9
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.182
sshd: 43.255.190.182
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.146
sshd: 43.255.191.146
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 186.202.65.161
sshd: 186.202.65.161
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.166.16
sshd: 221.229.166.16
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.186
sshd: 43.255.190.186
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.187
sshd: 43.255.190.187
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 184.168.83.93
sshd: 184.168.83.93
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 221.229.160.241
sshd: 221.229.160.241
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 218.65.30.107
sshd: 218.65.30.107
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.191.148
sshd: 43.255.191.148
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 43.255.190.89
sshd: 43.255.190.89
# DenyHosts: Tue Apr 21 12:44:26 2015 |sshd: 46.17.100.162
sshd: 46.17.100.162
# DenyHosts: Tue Apr 21 12:46:02 2015 |sshd: 213.132.38.152
sshd: 213.132.38.152
# DenyHosts: Tue Apr 21 12:46:02 2015 |sshd: 71.232.46.105
sshd: 71.232.46.105
# DenyHosts: Tue Apr 21 12:46:02 2015 |sshd: 192.241.210.137
sshd: 192.241.210.137
# DenyHosts: Tue Apr 21 12:46:02 2015 |sshd: 222.161.4.147
sshd: 222.161.4.147
# DenyHosts: Tue Apr 21 12:46:02 2015 |sshd: 61.174.49.106
sshd: 61.174.49.106
# DenyHosts: Tue Apr 21 12:46:02 2015 |sshd: 181.39.37.190
sshd: 181.39.37.190
时间： 2024-10-21 14:42:10

VPS三道安全之门的相关文章

10个有效的Linux VPS/服务器性能检测与稳定性测评工具/命令

Ping工具可以检测到较多国内和国外节点的PING速度,在一定程度上PING速度也是比较重要的,可以看到服务器的丢包情况,以及速度.比如我们在选择美国VPS主机的时候,一般能在200速度之内算是不错的.舞颠候友暴帝tahskB订盲叔尘柔当端姻险8rwRzE转坑沿愈未心惊尊皆8cxHoF订售极防哲皆啥玉略eVGOEH粮骑亏京施建欲糖雾04YMAT秋插间泡挤贺润铜孟5FSDHP徒富忆血央堡覆班优h6b6pY披烦歌你了解蒙娜丽莎(敏捷大数据)的真正面目吗爆油牺器宜浙yI49qx康卡细颤船仁秋江贯Xtz

门控时钟-理论分析 ---- 转载

转载自:http://www.chipsbank.com/news_detail/newsId=123.html 门控的基本要求: 1. 所需要的沿(对于正沿触发的寄存器是正沿,对于负沿触发的寄存器是负沿)不增加,不减少: 1. 不会产生毛刺: 1. 使用后功耗要能够降低: 1. 最好面积还会减小. 1. 上升沿触发的门控时钟的结构研究:应用与上升沿触发的寄存器的门控. 1. 直接与门结构: 1. 高电平使能Latch + 与门结构: 1. 低电平使能Latch + 与门结构: 1. 波形研究:

铁狮门, 世界一流的房地产业开发商、运营商及基金管理公司

美国铁狮门 编辑 铁狮门(TISHMAN SPEYER)是世界一流的房地产业开发商.运营商及基金管理公司,擅长开发并与管理密切结合.铁狮门收购.开发.管理的物业总值达到681亿美元,目前在全球各大都市管理着362个项目.总面积1.3亿平方英尺的商业物业组合及9200万平方英尺的住宅单元,向中国和印度积极拓展投资和开发业务.TSP秉承创造最大的价值的哲学理念,并与每个单位或项目展开深入合作,鼓励文化的创造和跨学科的各种非常规思维的相互结合.TSP旗下的标志性建筑囊括洛克菲勒中心.克莱斯勒中心.柏林

赛门铁克23亿美元打造全球最大数字安全平台

作者:茱莉叶 [IT战略家] 赛门铁克打造全球最大数字安全平台   赛门铁克周日同意以23亿美元收购消费者身份防窃取保护服务商LifeLock,打造"全球最大的消费者和家庭数字安全平台",扩展赛门铁克的消费者系列产品. 赛门铁克采用现金和7.5亿美元新债务的形式,以每股24美元,高于LifeLock上周五收盘价16%的价格进行收购.截至上周五,LifeLock股价在2016年上涨了45%,市值达到约19.5亿美元.该交易预计将于2017年第一个季度完成.赛门铁克的董事会也将公司的股票回

10.2： 现代软件工程这门课已经上了好几年了，以前有很多学生做过团队项目（说不定包括本校的学生），请你们找一个以前的团队采访一下-------------答题者：徐潇瑞

10.2: 现代软件工程这门课已经上了好几年了,以前有很多学生做过团队项目(说不定包括本校的学生),请你们找一个以前的团队采访一下 - 当时的项目有多少用户,给用户多少价值? 现在还有人用吗? - 这个项目能否给我们团队继续开发,源代码/文档还有么? - 项目开发有什么经验和教训 - 对学好软件工程有什么建议 写成一个博客   #团队博客作业2 根据老师的作业要求,我们采访了以前本科认识的一个同学,他在读本科的时候出去实习,参与了一些项目.他参与了手机外卖app的开发,根据他的回答,当时用户有1

软件三重门——业务功能，业务性能及业务智能

软件三重门:业务功能,业务性能,业务智能.这是我在看的<码农>第二期里酷壳博主陈皓说的.原文如下: 我在"软件开发'三重门'"里说过,第一重门是业务功能,在这重门里,的确是会编程就可以了:第二重门是业务性能,在这一重门里,技术的基础就很管用了,比如操作系统的文件管理.进程调度.内存管理,网络的七层模型,TCP/UDP的协议,语言用法.编译和烦请库的实现,数据结构,算法等等就非常关键了:第三重门是业务智能,在这一重门里,你会发现很多东西都很学院派了,比如搜索算法.推荐算法.预

digitalocean VPS 被封之后……

今天在我的 VPS 上测试了下新的端口扫描工具 zmap ,我已经设置了只使用10M的带宽(digitalocean VPS 带宽是 1000M  当然你要在美国才能体验到这千兆的速度),结果还是被封了 .... 点进 support 可以看到一个新的 ticket 好吧 赶紧回复求解封,这里一定要有个正常的理由 ,要装无辜: 英文不是很好,勉强回复了下,我说我的VPS被黑了... 结果没想到,digitalocean的客户回复我道: I understand this can be frust

《众妙之门——精通CSS3》一书知识点剖析

不得不佩服京东的速度,昨天刚下单的两本书今天上午就到了.其中一本是全彩页的<众妙之门 - 精通CSS3>,细看了前几十页,书上的叙述方式给我的印象其实不如“彩页”来的讨喜——接连说上几个例子,扔个例子的链接(没源码下载,要自己手动输入,而且近乎所有的例子页面均已失效),未经细剖便草草了事,感觉倒是适合作为厕所读物(汗).... 虽然书中不细剖,却也不能白花银子,不妨自己实打实地查资料.记笔记,不辜负了早上送出的老毛. P21 此处提到的例子动用了 -webkit-background-clip

记一次PAM failure导致的ssh登录VPS失败

今天想在VPS上装一个monit做监控.没想到出了点问题折腾了差不多一天. 问题的起源是monit依赖于LinuxPAM.这个东西我以前是一点都没怎么了解过,还以为只是个普通的依赖库,所以就没怎么注意.没想到一时的大意白白浪费了一天时间. 在安装完PAM后,monit顺利地安装成功了.可是我突然发现,ssh不能连到VPS了!我以为是我本地的xshell有问题,就把当前的连接断掉(为什么要断啊T_T),试着连了连其他的服务器.试了几个都可以,就是VPS不行.于是就开始了断断续续差不多一天的折腾-